Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: YZ8nZ0CjtiQW9i8b3nm+iPhgb8kWCYOYc/Fgjfz2RKg=
Subject key identifier: F3:C8:FE:A4:3E:5D:93:3C:E2:93:6D:24:FA:3F:E9:87:EA:D3:1C:F9
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 0196CE73D867424DE4CFB223BEEC86716999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1309
Signing time: Wed 14 May 2025 11:00:20 +0000
Manifest this update: Wed 14 May 2025 11:00:20 +0000
Manifest next update: Thu 15 May 2025 11:00:20 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: Qf3nKrh41Ew6g/ICqFqsIoXF3wbmlGOi4rFDtyQrL8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:73:d8:67:42:4d:e4:cf:b2:23:be:ec:86:71:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: May 14 11:00:20 2025 GMT
Not After : May 15 11:00:20 2025 GMT
Subject: CN=f3c8fea43e5d933ce2936d24fa3fe987ead31cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:ad:0a:e6:4c:ff:38:70:6a:74:cd:48:a9:
8d:c7:f9:02:65:5d:5c:b5:39:aa:89:2f:b5:45:81:
c6:ae:f5:c9:aa:01:ed:ea:60:ff:c9:3c:28:11:06:
78:be:3f:8d:6d:5c:8a:d0:7b:f2:bf:8d:09:d2:ff:
7e:ee:27:a6:2b:24:42:28:95:94:cb:ab:00:85:47:
fd:9c:b8:3a:2a:8c:fc:36:45:97:47:f1:33:8c:91:
c3:18:35:cb:0a:29:89:f6:3c:6d:27:53:da:d4:d1:
ea:ce:01:af:55:ff:56:20:c6:9f:97:c4:40:2e:34:
82:ba:de:69:4d:a5:92:bf:5c:b5:c6:ad:46:f6:27:
63:fe:50:98:e8:c5:cf:25:d8:85:b4:cb:9c:d8:d2:
83:44:cb:a6:06:88:11:a8:a0:d9:4b:73:ad:88:66:
90:87:05:31:58:94:10:0a:23:1a:43:38:43:89:dc:
7d:0e:4a:f1:47:48:75:9b:ef:b0:77:71:13:20:c8:
97:73:12:e8:32:6b:6c:29:78:5a:40:4a:c6:2c:d3:
62:e5:f1:6e:f6:a4:c0:f4:95:fb:88:c2:79:6a:56:
8c:fa:6d:18:f6:e7:0a:bb:81:a4:48:fe:74:95:8b:
99:d1:61:39:83:53:39:b3:16:e7:3f:ac:69:1f:ee:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:FE:A4:3E:5D:93:3C:E2:93:6D:24:FA:3F:E9:87:EA:D3:1C:F9
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:27:21:e3:6b:60:31:77:15:01:3b:6d:60:90:8d:85:28:06:
30:23:51:67:fb:3b:cb:19:d1:00:d9:1d:5b:85:f7:c1:dc:70:
b6:ab:a4:08:5e:ad:0f:0a:a1:46:ba:d1:2e:55:94:da:7f:23:
73:ee:fa:5a:20:20:37:45:29:ac:0d:a4:f1:af:87:40:bd:16:
e1:02:b4:31:03:db:d1:52:a6:62:90:df:dd:30:27:46:66:42:
d8:8c:78:70:dc:e9:55:c3:3c:03:43:83:42:43:f0:80:91:76:
ee:c3:0d:f4:eb:3e:d2:63:c2:4e:f2:70:19:20:18:31:98:06:
cc:b5:30:c8:70:ac:a0:14:64:a3:03:15:6d:bd:6f:cf:c0:47:
de:25:9b:32:88:34:16:de:11:90:c4:d8:1d:df:fd:2b:d6:98:
f6:a0:83:45:8b:b8:ec:4c:4e:d3:9a:86:9c:87:48:8a:a8:5d:
a9:47:d6:2e:c0:fd:f8:f3:2a:ed:48:78:e4:0d:e3:d4:74:64:
8f:2b:ac:fd:06:89:18:f3:52:c3:6a:94:a4:e1:d0:27:29:e2:
e9:19:46:16:78:d4:e4:c7:ae:a4:ef:2f:7d:35:0d:bd:24:70:
6f:bb:9d:9e:f3:7a:41:e7:2a:45:09:c5:56:60:b6:83:c8:b5:
6e:79:30:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOc9hnQk3kz7IjvuyGcWmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjUwNTE0MTEwMDIwWhcNMjUwNTE1MTEwMDIwWjAzMTEwLwYDVQQD
EyhmM2M4ZmVhNDNlNWQ5MzNjZTI5MzZkMjRmYTNmZTk4N2VhZDMxY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SKtCuZM/zhwanTNSKmNx/kCZV1c
tTmqiS+1RYHGrvXJqgHt6mD/yTwoEQZ4vj+NbVyK0Hvyv40J0v9+7iemKyRCKJWU
y6sAhUf9nLg6Koz8NkWXR/EzjJHDGDXLCimJ9jxtJ1Pa1NHqzgGvVf9WIMafl8RA
LjSCut5pTaWSv1y1xq1G9idj/lCY6MXPJdiFtMuc2NKDRMumBogRqKDZS3OtiGaQ
hwUxWJQQCiMaQzhDidx9DkrxR0h1m++wd3ETIMiXcxLoMmtsKXhaQErGLNNi5fFu
9qTA9JX7iMJ5alaM+m0Y9ucKu4GkSP50lYuZ0WE5g1M5sxbnP6xpH+6qhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPI/qQ+XZM84pNtJPo/6Yfq0xz5MB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaich42tg
MXcVATttYJCNhSgGMCNRZ/s7yxnRANkdW4X3wdxwtqukCF6tDwqhRrrRLlWU2n8j
c+76WiAgN0UprA2k8a+HQL0W4QK0MQPb0VKmYpDf3TAnRmZC2Ix4cNzpVcM8A0OD
QkPwgJF27sMN9Os+0mPCTvJwGSAYMZgGzLUwyHCsoBRkowMVbb1vz8BH3iWbMog0
Ft4RkMTYHd/9K9aY9qCDRYu47ExO05qGnIdIiqhdqUfWLsD9+PMq7Uh45A3j1HRk
jyus/QaJGPNSw2qUpOHQJyni6RlGFnjU5MeupO8vfTUNvSRwb7udnvN6QecqRQnF
VmC2g8i1bnkwzw==
-----END CERTIFICATE-----
Generated at Wed May 14 20:39:26 2025 by rpki-client